My Oracle Support Banner

How to Configure Oracle Enterprise Gateway API Explorer To Sign SOAP Attachments (Doc ID 1541268.1)

Last updated on APRIL 02, 2021

Applies to:

Oracle API Gateway - Version 11.1.1.4.0 and later
Information in this document applies to any platform.

Goal

When using Oracle Enterprise Gateway it appears to be not possible to create the WSS signature for SOAP attachments.

In API Explorer, it is possible to follow the menu path "Security >> Sign Request", then navigate to "Advanced >> Additional" tab.  Here, there is a check box for "Sign attachments".
When testing with a request with an attachment, if an attempt is made to sign the message, there is no signature for the attachment  The rest of the message is signed as expected.

There appears to be an "XML Signature Generation" filter available through Policy Studio that seems to perform this task on the gateway side, but it appears that the filter will perform the signing for the response.

How is it possible to send signed requests to OEG for verification where all the SOAP attachments must be signed?
 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.